NY A02833

Amends state finance law to require the state commissioner and all state agencies to ensure end point devices meet the National Institute of Standards and Technology (NIST) Cybersecurity Framework when procuring such equipment.

Defines "end point devices" as personal computing goods including desktops, laptops, tablets, mobile phones, thin clients, monitors, printers, and multifunctional imaging devices.

Requires the commissioner and each state agency to update their end point device procurement requirements within one year of any amendments to the NIST security standards and guidelines.

Takes effect 90 days after becoming law.